<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: cloud-foundry-capi</title><description>Every new CVE for cloud-foundry-capi.</description><link>https://agentprime.io/</link><item><title>CVE-2020-5423: Cloud Controller is vulnerable to denial of service via YAML parsing</title><link>https://agentprime.io/advisories/CVE-2020-5423/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-5423/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Dec 2020 01:55:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-5418: Cloud Controller allows users with no roles to list droplets</title><link>https://agentprime.io/advisories/CVE-2020-5418/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-5418/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Sep 2020 01:10:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-5417: Cloud Controller may allow developers to claim sensitive routes</title><link>https://agentprime.io/advisories/CVE-2020-5417/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-5417/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Aug 2020 21:50:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-5400: Cloud Controller logs environment variables from app manifests</title><link>https://agentprime.io/advisories/CVE-2020-5400/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-5400/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Feb 2020 19:30:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-11294: CAPI leaks service broker URLs and GUIDs to space developers</title><link>https://agentprime.io/advisories/CVE-2019-11294/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-11294/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Dec 2019 19:35:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-3785: Cloud Controller provides signed URL with write authorization to read only user</title><link>https://agentprime.io/advisories/CVE-2019-3785/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-3785/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2019 22:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>